Apache Trusted Releases (ATR) documentation

Welcome to the documentation for the ATR platform.

NOTE: This documentation is a work in progress.

Table of contents

• 1. Introduction to ATR
• 2. User guide
  • 2.1. Terminology
  • 2.2. Signing artifacts
  • 2.3. Checks
  • 2.4. License checks
  • 2.5. Trusted Publishing
  • 2.6. SBOM workflows
  • 2.7. Staging and voting
  • 2.8. Promoting to release
• 3. Developer guide
  • 3.1. Running the server
  • 3.2. Overview of the code
  • 3.3. Database
  • 3.4. Storage interface
  • 3.5. User interface
  • 3.6. Tasks
  • 3.7. Build processes
  • 3.8. Running and creating tests
  • 3.9. Code conventions
  • 3.10. Code policies
  • 3.11. How to contribute
  • 3.12. Authentication security
  • 3.13. Authorization security
  • 3.14. Input validation
  • 3.15. TLS security configuration
  • 3.16. API documentation policy
  • 3.17. ASFQuart usage
  • 3.18. Resource management